Closed GoogleCodeExporter closed 9 years ago
Any thoughts on building in some authentication and user account support?
It's fun, but I can't really use this on a production server without it ;-}
A quick and easy workaround would be to use a proxy server with auth built in.
If I were to make such a thing, should I just setup a filter that only allows
connection from my proxy?
Original comment by Ja...@wetheinter.net
on 5 Jul 2012 at 6:27
Yes. You could handle auth yourself via an authenticated proxy. We released
this demo knowing full well it shouldn't be used yet as a hosted service.
What's there is mostly a rush job and was only there so we could obtain a
username/handle (not actually to authenticate people yet). Ill add a simple
mechanism for setting up a global password. Any user handle so long as they
know the global password will be able to access the instance. The password will
be able to be passed in from the command line when you run the instance. Not
setting a password will mean that the instance is wide open.
We would still recommend that you restrict access to the server though using
other means.
The right way longer term though would be integration with Google accounts via
OAuth2, and UI in the IDE for the admin to set permissions and what not
(read/write etc..). And to also enable SSL by default.
Original comment by jaime...@gmail.com
on 5 Jul 2012 at 2:44
Original comment by jaime...@gmail.com
on 6 Jul 2012 at 1:50
Original comment by jaime...@gmail.com
on 6 Jul 2012 at 4:19
Original issue reported on code.google.com by
jaime...@gmail.com
on 4 Jul 2012 at 5:15